Enabling and disabling technologies

You can enable or disable the use of technologies for the Server, sensors, and monitoring points. Enabling or disabling technologies on sensors and monitoring points is available if technology inheritance is disabled for these objects.

Some technologies include methods that can be enabled or disabled separately. If a technology or method is disabled, the application does not monitor communications of devices using this technology or method. You can configure the application settings related to the disabled technologies or methods (for example, add or edit rules).

The following technologies and methods can be enabled and disabled:

• Asset Management:
  • Device activity detection
  • Device Information Detection
  • PLC Project Control.
  • Network Session Detection.
  • Risk detection (only on the Server node)
• Network Control:
  • Network Integrity Control
  • Command Control
• Process Control:
  • Rule-based Process Control
  • Unknown Tag Detection
  • Device Discovery for Process Control
• Intrusion Detection:
  • Rule-based Intrusion Detection
  • ARP Spoofing Detection
  • IP Protocol Anomaly Detection
  • TCP Protocol Anomaly Detection
  • Brute-force Attack and Scan Detection

This article describes the procedure of enabling and disabling technologies on a Server node. The actions for enabling or disabling technologies on sensor nodes and monitoring points are performed in the same way after the technology inheritance is disabled for these objects.

To change the state of technologies and methods on the Server node:

1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
2. Select Settings → Deployment.
3. Select the Server tile.

   The details area appears in the right part of the web interface window. The Manage technologies tab displays the list of technologies and methods that can be enabled or disabled.

   If the states of technologies and methods cannot be currently changed, the switches in the list are disabled. In this case, it is recommended to check the status of the kics4net service on the Server computer. If the service is not active, you must start it.

4. Use the toggle switches on the left to enable or disable the use of relevant technologies and/or methods. You can enable or disable all technologies and methods simultaneously by clicking the Enable all or Disable all links.
5. After enabling or disabling a technology or method, wait for the changes to be applied. The toggle switch is unavailable until it is finished moving to the other state.